rancher / system-upgrade-controller

In your Kubernetes, upgrading your nodes
Apache License 2.0
676 stars 83 forks source link

Conflict between privileged and allowPrivilegeEscalation #303

Open akelge opened 3 months ago

akelge commented 3 months ago

In the manifest we have

kind: Namespace
metadata:
  labels:
    pod-security.kubernetes.io/enforce: privileged

but in the deployment there is

        securityContext:
          allowPrivilegeEscalation: false

This is causing a failure in deploying, at least on rke2 1.28.8, I think that the solution would be to set allowPrivilegeEscalation to true